{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:97f7dc24-4496-58cf-9463-be2797ad13e0", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11", "type": "library", "name": "@angular/compiler-cli", "version": "5.2.11-tuxcare.11", "purl": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:548c070d-d707-5155-a915-efa48da7b888", "id": "CVE-2021-4231", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2021-4231 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:bf1ce3bd-dc43-57d3-9bea-2a851b024eab", "id": "CVE-2025-66035", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66035 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:cdd176af-c32b-569d-9628-3cdffed0932b", "id": "CVE-2025-66412", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66412 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1e7118f6-92e6-51d4-8d6a-77b9b391f663", "id": "CVE-2026-22610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-22610 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7994e5c3-8e37-5d3a-8015-c1553b6ed833", "id": "CVE-2026-27970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-27970 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:9331c13f-d733-53ce-be0e-f348013344bd", "id": "CVE-2026-41423", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-41423 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2b79bc18-b88c-58a3-8e8c-5e6752984ce5", "id": "CVE-2026-46417", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-46417 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5f69cd4b-ad90-54cb-8254-1dbd9e27bfff", "id": "CVE-2026-50168", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50168 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:81a13006-58b7-5ffb-a252-9b20a615364a", "id": "CVE-2026-50169", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50169 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0d209d9f-074f-51eb-98bd-a4bcea8f625a", "id": "CVE-2026-50170", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50170 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:17adad2f-f23f-51aa-8618-b6925365e7a0", "id": "CVE-2026-50171", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50171 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:65d2d31f-cd5d-52a1-9c4e-317bcb04bf9b", "id": "CVE-2026-50184", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50184 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:209e0faf-c261-5731-8b12-51ed530961cd", "id": "CVE-2026-50555", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50555 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:04a618f9-f791-58ed-955e-aaebe3735d31", "id": "CVE-2026-50556", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50556 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:5a171f99-3329-5e0b-b4ce-90506887b562", "id": "CVE-2026-50557", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-50557 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:7b9a05be-8bcd-5530-ac42-bd90e34a7305", "id": "CVE-2026-52725", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-52725 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:0de27392-0c3b-51a4-a088-92eb4d498c08", "id": "CVE-2026-54264", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54264 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:482c4c33-a4b8-52b9-8fb2-d8303110d341", "id": "CVE-2026-54265", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54265 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:4d82d657-fab2-5088-84da-134a4b5a57be", "id": "CVE-2026-54266", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54266 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c336768b-ad9f-57df-9f73-73462b364491", "id": "CVE-2026-54267", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54267 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c4ec31ff-4145-5be9-b5be-4b0c7e41bff9", "id": "CVE-2026-54268", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-54268 is fixed in version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:9b47f766-7c3b-56e7-8fd4-dfd91d7391b2", "id": "CVE-2026-68945", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-68945 does not affect version 5.2.11-tuxcare.11 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT affected by CVE-2026-68945. The vulnerable component `HttpTransferCache` does not exist in this version. This feature was introduced in Angular v16 as part of the modern SSR hydration system. Angular 5.2.11 only has the basic `TransferState` API (a generic key-value store for manual state transfer), not the automatic HTTP request caching interceptor that contains the vulne..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:fc6e6d61-a084-5b5c-b88e-4590faa69478", "id": "CVE-2026-69149", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69149 affects version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:3a9051a4-136a-5289-8615-043f1b65564d", "id": "CVE-2026-69151", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-69151 affects version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:1523e4e3-2864-5598-bb1e-7b2e9804e6a9", "id": "CVE-2026-88056", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88056 does not affect version 5.2.11-tuxcare.11 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11-tuxcare.19 does not contain the vulnerable URL resolution code pattern described in CVE-2026-88056. The vulnerability requires the url.ts file with parseUrl function calling String.prototype.trim() and the relativeUrlsTransformerInterceptorFn HTTP interceptor, both introduced in later Angular versions (post-June 2026). The target version uses a fundamentally different architectur..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:2cf0a278-b583-5b69-a1bf-9fd69ee5122c", "id": "CVE-2026-88057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88057 affects version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:8878a7cd-5ca2-5470-a9ea-aea3b4d1ebb4", "id": "CVE-2026-88059", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2026-88059 does not affect version 5.2.11-tuxcare.11 of @angular/compiler-cli. not_affected \u2014 Angular 5.2.11 is NOT AFFECTED by CVE-2026-88059. The vulnerability requires HttpTransferCache with hierarchical HttpClient delegation (withRequestsMadeViaParent()), features that were introduced in Angular v16. Angular 5.2.11 predates these features by approximately 6+ years and contains only a basic HTTP interceptor architecture with no automatic response caching mechanism. While TransferStat..." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }, { "bom-ref": "urn:uuid:c97a8198-6ccd-5cfa-a387-6461b8cdc9ca", "id": "CVE-2026-88060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-88060 affects version 5.2.11-tuxcare.11 of @angular/compiler-cli." }, "affects": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] } ], "dependencies": [ { "ref": "pkg:npm/%40angular/compiler-cli@5.2.11-tuxcare.11" } ] }